Bitcoin Seed Phrase: What It Is, Why It Matters, and How to Protect It

Last Updated: March 2026

The Bottom Line

Your seed phrase is a set of 12 or 24 words that controls access to all of your bitcoin. Lose it and your bitcoin is gone forever. Let someone else see it and your bitcoin is theirs. This guide covers exactly how seed phrases work, how to back them up properly, and what to do if something goes wrong.

Key Takeaways

• A seed phrase (also called a recovery phrase) is the master backup for your entire Bitcoin wallet
• It follows the BIP-39 standard: 2,048 English words, cryptographic randomness, built-in checksum
• Anyone who sees your seed phrase can steal all your bitcoin immediately
• Paper degrades. Metal backups like Blockplate or Cryptosteel survive fire and flood.
• Never store your seed phrase digitally. No screenshots, no cloud storage, no email.
• A passphrase ("25th word") adds a second layer of protection
• Shamir backup (SLIP39) lets advanced users split their seed across multiple shares

What Is a Seed Phrase?

When you set up a Bitcoin wallet for the first time, the screen displays a numbered list of plain English words. Twelve or twenty-four of them, usually with a warning not to take a screenshot. It looks almost too simple to be important. Something like:

1. abandon 2. ability 3. able 4. about 5. above 6. absent 7. absorb 8. abstract 9. absurd 10. abuse 11. access 12. accident

That list is your seed phrase. Think of it like the deed to a house. The house (your bitcoin) sits on the blockchain (Bitcoin's public ledger). The deed (your seed phrase) is the only proof you own it. Lose the deed, lose the house.

These words come from a specific list of 2,048 English words defined by BIP-39 (Bitcoin Improvement Proposal 39). Every Bitcoin wallet that follows this standard uses the same list. You can create a wallet with one app, write down the seed phrase, and restore it years later on a completely different device.

Your seed phrase is not a password you chose. Your wallet generated it using cryptographic randomness (a process producing truly unpredictable output). There are so many possible combinations that guessing someone's phrase is, for all practical purposes, impossible.

For definitions of technical terms, see the Bitcoin Glossary.

How BIP-39 Works Under the Hood

You don't need to understand this section to protect your bitcoin. But knowing the basics helps you see why seed phrases are so reliable.

Your wallet generates a random number: 128 bits for a 12-word phrase, 256 bits for 24 words. Then it calculates a checksum (an error-detection code) by running the number through SHA-256 (a one-way function used throughout Bitcoin) and appending the first few bits of the result:

• 12-word phrase: 128 bits of randomness + 4-bit checksum = 132 bits total
• 24-word phrase: 256 bits of randomness + 8-bit checksum = 264 bits total

The wallet splits the total into groups of 11 bits. Each group maps to one word from the BIP-39 list (2^11 = 2,048 values = 2,048 words). Twelve groups give 12 words. Twenty-four groups give 24.

Why the checksum matters: if you accidentally write down a wrong word, most wallets catch it during recovery and warn you the phrase is invalid. Not every error, but most common ones.

During recovery, the process reverses. Words convert back to the binary number, the checksum is verified, and the wallet derives your master private key. From that single key, it generates all your individual private keys and public addresses. Same seed, same tree, every time.

The Simple Version

If the section above made your eyes glaze over, here's what matters.

Imagine planting an acorn. From that one acorn grows an oak tree with thousands of leaves. Every leaf is a different Bitcoin address. Your seed phrase is the acorn. Everything grows from it.

The process is deterministic: same input, same output, every time. If your phone dies or your hardware wallet breaks, you enter your seed phrase into a new wallet and everything reappears. Your bitcoin was never stored on the device. It lives on the Bitcoin network. The seed phrase is your proof of ownership.

This is why people say "not your keys, not your coins." Your seed phrase is your keys. All of them. For the full picture on holding your own bitcoin, read the Self-Custody Guide.

Why Your Seed Phrase Is Everything

Let's talk about what happens when things go wrong. Not hypothetically. These are real people, real money, gone.

James Howells threw away a hard drive with 8,000 bitcoin in 2013. It ended up in a Welsh landfill. By 2025 those coins were worth roughly $950 million. He never recovered them.

Stefan Thomas stored 7,002 bitcoin on an encrypted IronKey USB drive and lost the password. The device allows 10 guesses before locking permanently. He used eight. Over $700 million behind a password he can't remember.

Analysts estimate 3 to 4 million bitcoin are permanently lost, mostly from mishandled seed phrases and private keys. Over $300 billion, sitting on the blockchain with nobody able to touch it.

If you lose your seed phrase and your device also fails, your bitcoin is gone permanently. No customer support. No password reset.

If someone else gets your seed phrase, they can import it into their own wallet and move every satoshi (the smallest unit of bitcoin, 0.00000001 BTC) you own. No device needed. No PIN needed. Just the words.

This isn't meant to scare you. It's meant to make you take the next few sections seriously.

12 Words vs 24 Words

You'll see wallets with 12-word seed phrases and others with 24 words. The difference is the amount of randomness, called entropy in cryptography. Think of it like a combination lock. A 12-word phrase has 128 digits in the combination. A 24-word phrase has 256. Both are absurdly long.

• 12-word phrase: 128 bits of entropy, roughly 340 undecillion possible combinations (a number with 39 digits)
• 24-word phrase: 256 bits of entropy, roughly 115 quattuorvigintillion possible combinations (a number with 78 digits)

Many respected wallets, including Blockstream Jade, default to 12 words because it's easier to write down and already beyond the reach of any known attack.

The short answer: 24 words gives you a larger security margin, and it's the standard for most hardware wallets like Trezor and Coldcard. But 12 words is not insecure. Either way, the real risk isn't someone guessing your phrase. It's someone finding it.

How to Back Up Your Seed Phrase Safely

Writing your seed phrase on paper is a fine starting point. But paper burns, floods, fades, and gets thrown away. For anything beyond short-term storage, you want something that can survive a disaster. That's where metal backups come in.

What Metal Backups Look Like

Thick stainless steel plates, about the size of a credit card but heavier. Some use letter tiles you slide into slots. Others are flat plates where you stamp dots with a center punch and hammer. No electronics, no batteries, no moving parts. Just steel and your words.

These survive house fires (tested above 1,500°F / 815°C), floods, and corrosion.

Metal Backup Comparison

Blockplate is the most straightforward. Place the plate on a hard surface, line up the punch tool next to the correct letter, and tap with a hammer. Each word only needs the first four letters (BIP-39 is designed so four letters uniquely identify each word). Takes about 15 minutes.

Cryptosteel Capsule is a cylindrical steel tube with letter tiles that slide onto a core rod. Compact and easy to hide. Assembly takes longer, but the result is sturdy and looks unremarkable.

Billfodl opens like a book with a hinged frame. Tiles slot into grooves on each row. Solid build, independently tested for fire and water resistance.

All three work well. If you're just getting started, Blockplate offers the best value with the simplest setup.

Paper Backup Tips

• Use a pencil, not a pen. Graphite doesn't fade or run when wet.
• Double-check every word against the screen. One wrong word can make recovery impossible.
• Make two copies in separate physical locations.
• Don't label it "Bitcoin seed phrase." Keep it discreet.

Where to Store Your Backup

Good options: a home safe (fireproof rated), a bank safe deposit box, or a trusted family member's home in a sealed envelope. The key is at least two copies in two different locations. If one is destroyed by fire, theft, or flood, you still have the other.

A fireproof safe at home plus a sealed envelope at a relative's house covers most people. If you're storing significant value and thinking about what happens to your bitcoin after you're gone, read the Bitcoin Inheritance Planning guide.

Testing Your Backup

This step gets skipped constantly, and it's one of the most important. Verify your backup works before you depend on it.

Here's how to do it safely with a hardware wallet:

1. Write down your seed phrase during wallet setup.
2. Send a small test amount to the wallet. Even a few thousand sats works.
3. Wipe the hardware wallet. Factory reset, erasing the device completely.
4. Restore from your seed phrase. Choose "Recover wallet" and type in your words from the backup.
5. Check your balance. If the test amount shows up, your backup works. If it doesn't, something is wrong with what you wrote down, and you caught it before it mattered.

The whole process takes about 10 minutes and costs nothing beyond a small network fee. Do this once when you set up the wallet. Then you never have to wonder.

The 7 Deadly Seed Phrase Mistakes

People lose bitcoin to every one of these, regularly. For more, see Bitcoin Security Mistakes.

1. Taking a Screenshot

Your phone syncs photos to iCloud, Google Photos, or another cloud service automatically. A data breach or compromised account means your seed phrase is exposed. Screenshots are one of the most common ways people lose funds.

2. Storing It in Cloud Storage

Google Drive, Dropbox, iCloud Notes, OneDrive. Accessible from anywhere means attackable from anywhere. If your email gets compromised, so does your cloud storage, and so does your bitcoin.

3. Emailing It to Yourself

Email is not encrypted by default. Your message sits on a server indefinitely. If your email is hacked, your seed phrase is right there in your sent folder.

4. Keeping Any Digital Copy

A text file on your desktop. A note in your password manager. A document on a USB drive. Any digital copy can be reached by malware, stolen devices, or people who borrow your computer. Seed phrases belong on physical media only.

5. Storing Only One Copy in One Location

One copy in one place means one event wipes everything out. House fire. Robbery. Flood. Keep at least two copies in two separate locations.

6. Telling People About It

The fewer people who know your seed phrase exists, the better. No legitimate service will ever ask for your seed phrase. Anyone who does is trying to rob you. Social engineering (manipulating people into revealing sensitive information) is a real threat.

7. Simply Losing It

People write it down on a random piece of paper, toss it in a drawer, and three years later can't find it. Treat your seed phrase backup like a birth certificate. It goes in a specific place, and everyone relevant knows where that place is.

Advanced Protection: Passphrases (The "25th Word")

Once you're comfortable with the basics, there's an extra layer worth knowing about: the passphrase, sometimes called the "25th word."

A passphrase is an additional word or phrase you choose yourself that gets combined with your seed phrase during key derivation. With the same 24-word seed but a different passphrase, your wallet generates a completely different set of keys and addresses. A blank passphrase (the default) produces one wallet. "vacation" produces another. "Vacation" (capital V) produces yet another. They're completely separate.

Why Passphrases Matter

If someone finds your 24-word seed phrase but you use a passphrase, the wallet they see (without a passphrase) will be empty or contain a small decoy amount. Your actual bitcoin lives behind the passphrase they don't know. You can even keep a small "decoy" balance in the unprotected wallet to make it convincing.

When to Use a Passphrase

• You want an extra layer beyond physical seed phrase security
• You're storing a significant amount of bitcoin
• You understand and accept the risks below

The Risks

Your passphrase is not recoverable. Forget it and those funds are gone permanently. You now have two things to back up: the seed phrase and the passphrase. Store them separately so finding one doesn't reveal both.

The passphrase is case-sensitive and space-sensitive. "My Secret" and "my secret" produce different wallets. Write it down exactly as you entered it.

Most hardware wallets support passphrases, including Trezor, Ledger, and Coldcard. Coldcard is particularly well-regarded here, letting you save the passphrased wallet as a separate account on the device.

Advanced Protection: Shamir Backup (SLIP39)

If you want distributed backup without the security problems of naive splitting (see the FAQ below), Shamir's Secret Sharing is the proper way to do it.

SLIP39 is a standard developed by the team behind Trezor. Instead of producing one seed phrase, it splits your wallet's secret into multiple shares. Each share is a list of 20 or 33 words from a different word list than BIP-39 (they're not interchangeable).

You choose a threshold, for example 2-of-3 or 3-of-5. You need at least that many shares to reconstruct your wallet. Any single share on its own reveals absolutely nothing about your bitcoin. This is a mathematically proven property of the scheme, not just an assumption.

Example: You create a 2-of-3 backup. One share in your home safe, one in a bank deposit box, one with a trusted family member. If your house burns down, you combine the bank and family shares. If the family member turns untrustworthy, they can't do anything with a single share alone.

Limitations: Currently supported only by Trezor Model T, Trezor Safe 3, Trezor Safe 5, and a small number of other wallets. Not compatible with BIP-39. More complex to set up and less widely supported for recovery.

For most beginners, a standard BIP-39 seed phrase with metal backup and geographic redundancy is the right approach. Shamir is worth considering once you're comfortable with the basics. For even more advanced security, explore multisig setups.

What to Do If Your Seed Phrase Is Compromised

If you believe someone may have seen or accessed your seed phrase, act immediately.

Step 1: Stay calm, move fast. Panicking leads to mistakes. You likely have minutes to hours, not seconds. Take one breath, then get to work.

Step 2: Create a brand new wallet. On a trusted, clean device, set up a completely new wallet with a fresh seed phrase. Write it down properly. Do not reuse the compromised phrase for anything.

Step 3: Transfer everything immediately. Open your old (compromised) wallet and send ALL your bitcoin to an address in your new wallet. Check every account type. Some wallets use multiple address formats (Legacy, SegWit, Taproot), and funds might be spread across them. Leave nothing behind.

Step 4: Wait for confirmation. Wait for at least one confirmation on the Bitcoin network (roughly 10 minutes). Two or three is better. Verify your full balance shows in the new wallet.

Step 5: Destroy every copy of the old phrase. Shred the paper. If you have a metal backup, grind the letters off or deface it beyond readability. That old phrase is burned forever.

Step 6: Figure out what went wrong. Did someone find your paper backup? Was there a digital copy you forgot about? Understanding the breach prevents it from happening again.

Frequently Asked Questions

Can I change my seed phrase?

No. Your seed phrase is generated once and cannot be modified. If you want a new one, you create an entirely new wallet and transfer your funds over. The old wallet and seed phrase should then be abandoned and destroyed.

What happens if I lose one word from my seed phrase?

It may be recoverable. Since the BIP-39 word list contains only 2,048 words, a tool can check each possibility for the missing position and verify the checksum. This takes seconds on a modern computer. Losing two or more words makes recovery exponentially harder and may be impractical. This is why careful, legible backups matter.

Is it safe to store my seed phrase in a password manager?

No. Password managers are designed for passwords, which can be reset if the service is breached. Your seed phrase cannot be reset. If the password manager is compromised, your seed phrase is exposed. Stick to physical backups only.

Can someone guess my seed phrase?

In practice, no. A 12-word phrase has 2^128 possible combinations (a number with 39 digits). Every computer on Earth running for the entire age of the universe wouldn't come close to trying them all. A 24-word phrase has 2^256 possibilities, which is that number squared. Brute-force guessing is not a realistic threat.

Do I need to back up my seed phrase if I use a hardware wallet?

Absolutely. Your hardware wallet is just a device, and devices break, get lost, or get stolen. The seed phrase is your backup to restore access on a new device. Without it, a broken hardware wallet means lost bitcoin.

Should I split my seed phrase into parts and store them separately?

This sounds clever but it's risky. Splitting a 24-word phrase into two halves weakens security because each half has less entropy. An attacker who finds one half has a much easier brute-force target than guessing all 24 words from scratch.

If you want distributed storage, use Shamir backup (SLIP39) as described above or a proper multisig setup. For most people, two complete copies in separate locations is simpler and safer.

What if my house burns down and my seed phrase is inside?

This is exactly why you need geographic redundancy. Keep at least two copies in physically separate locations. A metal backup can survive house fires (tested above 1,500°F / 815°C), but having a second copy elsewhere eliminates the single point of failure entirely.

My wallet shows a "derivation path." Do I need to save that too?

A derivation path tells your wallet how to generate addresses from your master key. It looks like m/84'/0'/0', where the numbers indicate the address format (84 = native SegWit, 49 = wrapped SegWit, 44 = Legacy, 86 = Taproot).

Most wallets use standard paths, and recovery tools scan common ones automatically. Still, writing down the derivation path alongside your seed phrase is good practice, especially with less common wallet software.

Can I use the same seed phrase in different wallet apps?

Yes, as long as they both support BIP-39. You could generate a seed phrase on a Coldcard and later restore it on a Trezor or a software wallet like Sparrow. Different wallets may use different derivation paths by default, so you might need to select the correct address type during recovery to see all your funds.

What happens to my bitcoin if I die?

Without planning, your bitcoin dies with you. Nobody can access funds without the seed phrase, and a court order won't help. Options include a sealed envelope with your will, Shamir shares distributed to trusted family members, or a multisig arrangement where heirs hold some keys. Read the Bitcoin Inheritance Planning guide for details.

Your Next Steps

You now know more about seed phrases than most bitcoin owners. That knowledge is worth nothing if you don't act on it.

1. Check your current backup. Can you find it? Is it legible? Complete?
2. Get a metal backup. Blockplate or Cryptosteel for long-term durability.
3. Test your recovery. Follow the steps above.
4. Set up a second storage location. Two copies, two places.
5. Consider a passphrase if you're storing significant value.
6. Read the [Self-Custody Guide](/learn/self-custody-guide/) for the full picture.

Related Content

• [Best Bitcoin Wallets](/wallets/): Find the right wallet before worrying about backups
• [Coldcard MK4 Review](/wallets/coldcard-mk4-review/): The gold standard for seed phrase security
• [Self-Custody Guide](/learn/self-custody-guide/): The complete guide to holding your own keys
• [Multisig Explained](/learn/multisig-explained/): Distribute control across multiple wallets
• [Bitcoin Security Mistakes](/learn/bitcoin-security-mistakes/): Common errors and how to avoid them
• [Bitcoin Inheritance Planning](/learn/bitcoin-inheritance-planning/): Make sure your bitcoin survives you
• [Bitcoin Glossary](/learn/bitcoin-glossary/): Every term in this article and more